PermissionEvaluationRequest Input Object
Input to evaluate a list of permissions available for a user. The less permissions are to be checked - the better will be a response time. API Services are encouraged to either do a check for a single permission or calculate a permission for a single operation.
Fields
#
target
Scope of evaluation in format of glob pattern.
To calculate all permissions for all resources, specify **
.
To calculate all permissions on a single resource, specify {resource}:**
, e.g. urn:cx/users:data/roles:**
.
To calculate a permission for a single operation on a resource, specify {resource}:{operation}:*
, e.g. urn:cx/users:data/roles:read:*
.
To check a single permission, specify {resource}:{operation}:{level}
, e.g. urn:cx/users:data/roles:read:all
.
Specifying any other pattern will result in 400 Bad Request, as well as specifying a non-existing resource, operation or permission level.
Usages
#
References
#
- Argument request of field permissionsEvaluate from type Query
PatchStrategy